Network node memory utilization analysis

Patent metadata

Field	Value
Publication number	US-10652102-B2
Application number	US-201715661912-A
Country	US
Kind code	B2
Filing date	Jul 27, 2017
Priority date	Jun 19, 2017
Publication date	May 12, 2020
Grant date	May 12, 2020

Abstract

Systems, methods, and computer-readable media analyzing memory usage in a network node. A network assurance appliance may be configured to query a node in the network fabric for a number of hardware level entries, stored in memory for the node, that are associated with a concrete level network rule. The network assurance appliance may identify a logical level network intent associated with the concrete level network rule, identify a logical level component of the logical level network intent, and attribute the number of hardware level entries to the logical level component.

First claim

What is claimed is:

1. A computer-implemented method comprising:
querying a leaf node in a network fabric for hardware level entries associated with concrete level network rules implemented on the leaf node, the hardware level entries stored in a memory for the leaf node;
for each of the concrete level network rules,
identifying one of a plurality of logical level network intents implemented on the leaf node, each of the plurality of logical level network intents associated with one of the concrete level network rules, each of the plurality of logical level network intents identified based on a logical model with relational information for the plurality of logical level network intents and the concrete level network rules;
identifying logical level components of the one of the plurality of logical level network intents; and
attributing the hardware level entries to each of the logical level components.

2. The computer-implemented method of claim 1 , further comprising:
receiving a query for a total number of the hardware level entries associated with a selected one of the logical level components; and
providing the total number in response to the query.

3. The computer-implemented method of claim 1 , further comprising:
generating a mapping of a total number of the hardware level entries to the logical level components for logical level network intents implemented on the leaf node based on the number of hardware level entries attributed to each of the logical level components; and
providing the total number of the hardware level entries to an interface.

4. The computer-implemented method of claim 1 , further comprising:
receiving, from the leaf node, the concrete level network rules implemented on the leaf node.

5. The computer-implemented method of claim 4 , further comprising:
querying the leaf node for the concrete level network rules implemented on the leaf node.

6. The computer-implemented method of claim 4 , wherein the concrete level network rules implemented on the leaf node received from the leaf node comprises zoning rule mapping information.

7. The computer-implemented method of claim 1 , wherein the memory for the leaf node is a Ternary Content-Addressable Memory (TCAM) and the hardware level entries comprises at least one TCAM entry.

8. The computer-implemented method of claim 1 , wherein the logical level components comprise at least one of a contract, an endpoint, an endpoint group, a bridge domain, or a protocol.

9. The computer-implemented method of claim 1 , wherein the concrete level network rule is an access control (actrl) rule.

10. A system comprising:
one or more processors; and
at least one computer-readable storage medium storing instructions which, when executed by the one or more processors, cause the system to:
query a node in a network fabric for hardware level entries associated with a concrete level network rule, the hardware level entries stored in a memory for the node;
identify one of a plurality of logical level network intents associated with the concrete level network rule, each of the plurality of logical level network intents identified based on a logical model with relational information for the plurality of logical level network intents and the concrete level network rule;
identify a logical level component of the plurality of logical level network intents;
attribute the hardware level entries to the logical level component; and
provide the hardware level entries to an interface.

11. The system of claim 10 , wherein the node is a leaf node in the network fabric.

12. The system of claim 10 , wherein the instructions further cause the system to process a query for the hardware level entries associated with the logical level component by providing the hardware level entries to the interface in response to the query.

13. The system of claim 10 , wherein the instructions further cause the system to:
generate a mapping of a total number of hardware level entries to logical level component for logical level network intents implemented on the node based on the number of hardware level entries attributed to the logical level component; and
provide the total number of hardware level entries to the interface.

14. The system of claim 10 , wherein the interface is a web interface configured to provide status information for the network fabric to a network administrator.

15. A non-transitory computer-readable medium comprising instructions, the instructions, when executed by a computing system, cause the computing system to:
determine concrete level network rules implemented on a leaf node;
for each of the concrete level network rules,
query the leaf node in a network fabric for hardware level entries associated with the concrete level network rules;
identify one of a plurality of logical level network intents implemented on the leaf node, each of the plurality of logical level network intents associated with one of the concrete level network rules, each of the plurality of logical level network intents identified based on a logical model with relational information for the plurality of logical level network intents and the concrete level network rules;
identify logical level components of the one of the plurality of logical level network intents; and
attribute the hardware level entries to each of the logical level components; and
generate a mapping of a total number of the hardware level entries to the logical level components for logical level network intents implemented on the leaf node based on the number of hardware level entries attributed to each logical level component in the logical level components.

16. The non-transitory computer-readable medium of claim 15 , wherein the instructions further cause the computing system to provide the total number of the hardware level entries to a network administrator.

17. The non-transitory computer-readable medium of claim 16 , wherein the instructions further cause the computing system to process a query for the total number of the hardware level entries by providing the total number of the hardware level entries in response to the query.

18. The non-transitory computer-readable medium of claim 15 , wherein the instructions further cause the computing system to receive, from the leaf node, the concrete level network rules implemented on the leaf node.

19. The non-transitory computer-readable medium of claim 15 , wherein the number of hardware level entries comprises at least one Ternary Content-Addressable Memory (TCAM) entry.

20. The non-transitory computer-readable medium of claim 15 , wherein the logical level components comprise at least one of a contract, an endpoint, an endpoint group, a bridge domain, or a protocol.

Assignees

• Cisco Tech Inc

Inventors

• Kompella Ramana Rao
• Nagarajan Chandra
• Monk John Thomas
• Ghantasala Purna Mani Kumar

Classifications

• H04L41/0866 Primary

  Checking the configuration · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L41/0253

  using browsers or web-pages for accessing management information · CPC title

• H04L41/24

  using dedicated network management hardware · CPC title

• H04L41/145

  involving simulating, designing, planning or modelling of a network · CPC title